In the Claims: 

1 . (Previously Presented) A system for protected data transmission in ring-shaped bus 
systems, comprising 

- a control unit (1) which sends output data and checking signals for a control process to 
peripheral units (4, 7, 8, 9, 12), 

- a peripheral monitoring unit (4) which has a first transfer unit (5) for monitoring the transmitted 
data and a second transfer unit (6) for monitoring data to be read back into the control unit (1), 
and 

- at least one peripheral safety-related unit (9) for receiving or transmitting safety-related data, in 
which data are temporarily stored for output, which has a checking logic (1 1) for monitoring the 
temporarily stored data and an output unit (10) for outputting the temporarily stored data, 

the temporarily stored data being monitored by the checking logic (1 1) in such a manner that, in 
the case of a fault, a safe state of the output unit (10) for the control process is initiated, 
the first transfer unit (5) monitoring the data sent out by the control unit (1), in such a manner 
that, in the case of a fault, release data for the peripheral safety-related unit (9) are suppressed or 
deleted so that the faulty data do not reach the control process, particularly data transmission 
sequences, wherein the input data of the peripheral safety-related unit (9) and its temporarily 
stored data are read back via the second transfer unit (6), whereby the peripheral safety-related 
unit (9) reads back the temporarily stored data via a bus unit (23), whereby the peripheral safety- 
related unit (9) comprises a further bus unit (22) so that the peripheral safety-related unit (9) has 
redundant input channels (24, 25) and thus redundantly monitors the connected control process 
and can detect a fault. 
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2. (Original) The system as claimed in claim 1, characterized in that the temporarily stored data 
and the input data of the peripheral safety-related unit (9) are provided to the peripheral 
monitoring unit (4). 

3. (Cancelled) 

4. (Previously Presented) The system as claimed in claim 1, characterized in that the 
peripheral safety-related unit (9) has a buffer (27) which is read back by a bus unit (23) of said 
peripheral safety-related unit (9) and is thus checked by the peripheral monitoring unit (4) even 
before release to the control process, particularly of data transmitted via the bus, via the output 
logic (28) with the output signal (29). 

5. (Cancelled) 

6. (Previously Presented) The system as claimed in claim 1, characterized in that the 
checking logic (11) decides whether the data stored in the buffer (27) are output via the output 
logic (28). 

7. (Previously Presented) The system as claimed in claim 1, characterized in that the 
checking logic (11) releases or deletes the temporarily stored data. 

8. (Previously Presented) The system as claimed in claim 1, characterized in that the 
peripheral monitoring unit (4) with the first transfer unit (5) is capable of manipulating the data 
for the peripheral safety-related unit (9). 

9. (Previously Presented) The system as claimed in claim 1, characterized in that the 
peripheral monitoring unit (4) overwrites data of the SPC. 

10. (Previously Presented) The system as claimed in claim 1, characterized in that agreement 
to a data output from the peripheral safety-related unit (9) is prevented by the overwriting of the 
data. 
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1 1 . (Previously Presented) The system as claimed in claim 1, characterized in that the 
checking logic (11) receives from the peripheral monitoring unit (4) an information item which 
prevents a faulty output. 

12. (Previously Presented) The system as claimed in claim 1, characterized in that the 
peripheral safety-related unit (9) only becomes active if it has received an agreement for the data 
of the output unit (10) via the checking unit (1 1). 

13. (Currently Amended) The system as claimed in claim 1, characterized in that the 
peripheral units (4, 7, 8, 9, 12) themselves can perform logic operations and thus a higher proce s s 
sp ee d is achi e v e d in th e ov e rall combin e d operation . 

14. (Previously Presented) The system as claimed in claim 1, characterized in that the 
peripheral monitoring unit (4) itself handles control functions and thus a combined operation 
with a safety control unit is produced. 

15. (Previously Presented) The system as claimed in claim 1, characterized in that the 
peripheral safety-related unit (9) manages with standard non-safety-related modules for the bus 
traffic and does not need any special safety-related modules. 

16. (Previously Presented) The system as claimed in claim 1, characterized in that the system 
is operable in standard bus systems and is capable of operating without additional installation of 
further bus systems or special components. 

17. (Previously Presented) The system as claimed in claim 1, characterized in that the system 
is installable subsequently by adding the peripheral monitoring unit (4) and exchanging normal 
peripheral units for peripheral safety-related units (9). 
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18. (Previously Presented) The system as claimed in claim 1, characterized in that the safety 
function of the system can also be subsequently expanded by adding hardware elements or 
software modules. 

19. (Cancelled) 

20. (Cancelled). 

21. (Cancelled) 

22. (Cancelled) 

23. (Cancelled) 

24. (Cancelled) 
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